Lenovo is shipping computers out with man-in-the-middle adware that breaks https encryption.
The Critical threat is from computers with adware from a company called Superfish which installs a self-signed root HTTPS certificate that can intercept encrypted traffice for every website a user visits. Basically this threat undermines the very reason HTTPS protections exist in the first place.
